Securing Kubernetes An objective, consensus-driven security guideline for the Kubernetes Server Software.
An objective, consensus-driven security guideline for the Kubernetes Server Software.
A step-by-step checklist to secure Kubernetes:
For Kubernetes 1.11 (CIS Kubernetes Benchmark version 1.3.0)
CIS has worked with the community since 2017 to publish a benchmark for Kubernetes
Other CIS Benchmark versions:
For Kubernetes (CIS Kubernetes Benchmark version 1.2.0)
Discussion
•
08 Nov 2018
Benchmark recommenedation for the PodSecurityPolicy is that it 'MustRunAsNonRoot', but it is also recommended to set admission plugin SecurityContextDeny. Then how to change the user that the container runs as?
Ticket
•
31 Oct 2018
The default etcd data directory permissions are 755 and not 700
